CVE-2026-4600

critical

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in K…

Vendor / product: Kjur — jsrsasign

Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic (and the related DSA/X509 verification flow in src/dsa-2.0.js). An attacker can forge DSA signatures or X.509 certificates that X509.verifySignature() accepts by supplying malicious domain parameters such as g=1, y=1, and a fixed r=1, which make the verification equation true for any hash.

CVSS

9.1

9.1 (CVSS v3.1)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity source: NVD CVSS v3.1 (nvd@nist.gov)

Timeline (UTC)

Published: 2026-03-23 06:16

Modified: 2026-09-10 13:20

NVD status: Modified

Last synced 2 days ago

Verified against the source API 2026-10-27 07:07 UTC

Exploitation

Not listed in CISA KEV (as of last catalog sync)

Absence from KEV does not mean a CVE is not exploited. Exploitation status: unknown (no authoritative evidence in our sources).

Affected products

kjur / jsrsasign <11.1.1

Weakness classification (CWE)

CWE-347

Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.

Mitigation & advisories

Patch / mitigation: https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7

Patch / mitigation: https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60

Patch / mitigation: https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7

References

https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7 report@snyk.io
https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60 report@snyk.io
https://github.com/kjur/jsrsasign/pull/646 report@snyk.io
https://security.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-15812268 report@snyk.io
https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940 report@snyk.io
https://access.redhat.com/errata/RHSA-2026:19375 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:19409 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:19410 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:6568 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:6720 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:6912 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/errata/RHSA-2026:6926 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://access.redhat.com/security/cve/CVE-2026-4600 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://bugzilla.redhat.com/show_bug.cgi?id=2450208 0b0ca135-0b70-47e7-9f44-1890c2a1c46c
https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7 134c704f-9b21-4f2e-91b3-4a467353bcc0
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4600.json 0b0ca135-0b70-47e7-9f44-1890c2a1c46c

Data sources

NVD CVE API 2.0 — fetched 2026-10-27 07:07 UTC · record ↗

Learn the basics

Understanding CVEs and CVSS Scores

Related CVEs

CVE-2026-4601